Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Is mls qos trust necessary in the following scenario?

We are deploying riverbed steelhead devices between our core switch and routers in each of our offices.  These all connect to each other over an MPLS network.

Before the Steelheads, we had a simple policy on each router that identified several types of traffic we most cared about and set the DSCP marking right at the router,just before the traffic was handed off to mpls.

The steelhead will now be marking the traffic for us. This is because in the mode we've deployed, it changes the IP address and port numbers so that our router, with only a few exceptions (voice, video) can not recognize the traffic.  So the Steelhead will mark it for us.

The question I have is, do I need ot issue any commands such as the MLS Qos Trust command on the router interface coming in from the Steelehead in order to retain those markings, or will the router just pass my steelhead markings through?

Haven't done much QoS, and the course has been soooooooo long ago...

  • WAN Routing and Switching
1 ACCEPTED SOLUTION

Accepted Solutions
Super Bronze

Re: Is mls qos trust necessary in the following scenario?

Disclaimer

The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.

Liability Disclaimer

In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.

Posting

Routers normally leave untouched ingress ToS, unless you configure a policy to something else.

Catalyst switches, if QoS disabled, also normally leave ToS alone.  With QoS enabled, by default, they often will reset ToS unless you config them to do otherwise (e.g. a trust statement).  (NB: Some of the newer Catalysts might follow "router" rules, e.g. 4500 sup7.)

1 REPLY
Super Bronze

Re: Is mls qos trust necessary in the following scenario?

Disclaimer

The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.

Liability Disclaimer

In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.

Posting

Routers normally leave untouched ingress ToS, unless you configure a policy to something else.

Catalyst switches, if QoS disabled, also normally leave ToS alone.  With QoS enabled, by default, they often will reset ToS unless you config them to do otherwise (e.g. a trust statement).  (NB: Some of the newer Catalysts might follow "router" rules, e.g. 4500 sup7.)

106
Views
0
Helpful
1
Replies
This widget could not be displayed.